Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa
File:                     34352e3136362e38342e302f32322d3332203d3e20323633323932.roa (raw, json)
Hash identifier:          mhpWA7i7K4DAxvpwDxHoJ5cmUAgTvw/RkJUsh75q34o=
Subject key identifier:   DC:7C:D8:52:C4:0A:56:AD:26:52:5D:D0:19:BD:F9:2B:65:F7:05:9D
Certificate issuer:       /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial:       2424E680BA56F4D2EA75A8ABD3CBE017805F7F8E
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa
Signing time:             Tue 03 Sep 2024 23:20:33 +0000
ROA not before:           Tue 03 Sep 2024 23:15:33 +0000
ROA not after:            Tue 02 Sep 2025 23:20:33 +0000
asID:                     263292
IP address blocks:        45.166.84.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:24:e6:80:ba:56:f4:d2:ea:75:a8:ab:d3:cb:e0:17:80:5f:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
        Validity
            Not Before: Sep  3 23:15:33 2024 GMT
            Not After : Sep  2 23:20:33 2025 GMT
        Subject: CN=DC7CD852C40A56AD26525DD019BDF92B65F7059D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:32:c7:b6:bb:2e:24:48:eb:17:bc:41:29:
                    e6:71:ff:56:a6:0e:7f:17:e2:53:9e:a1:fe:a7:d6:
                    4f:ea:89:c0:72:27:de:7c:f8:3b:9e:e0:15:60:40:
                    aa:6a:6d:65:c2:f0:7a:1d:85:51:96:77:cc:50:90:
                    1e:1f:67:27:81:36:3b:03:25:fd:49:9f:e2:95:49:
                    cf:45:78:a8:70:3a:64:fb:fb:9d:9c:5f:b7:68:ae:
                    4c:a3:5d:b3:75:93:7f:be:96:0f:f2:50:53:c9:32:
                    7f:aa:18:c7:77:70:dd:06:12:e5:87:18:e1:17:7a:
                    4c:76:e5:e3:2a:67:ac:a7:12:bd:0d:99:20:73:c9:
                    31:64:69:b4:77:ed:82:87:b0:76:d4:fc:47:af:d6:
                    d9:7f:a9:4c:b6:74:9f:cf:ea:1b:93:5d:07:62:51:
                    87:e4:e2:ac:c5:c1:05:99:97:a8:c6:00:74:5b:cd:
                    4e:ac:37:55:a1:4a:f8:28:bc:27:5b:f1:14:69:29:
                    5d:20:0e:1e:74:e5:81:83:c1:0a:21:86:fd:b3:45:
                    eb:c4:59:79:f6:87:13:ad:1b:47:51:e2:20:31:a5:
                    a9:a5:7d:fe:5d:8c:79:9c:05:2b:b2:8b:1a:15:23:
                    fb:5b:b0:1d:ae:17:b7:72:6a:02:7d:56:8d:e6:f8:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7C:D8:52:C4:0A:56:AD:26:52:5D:D0:19:BD:F9:2B:65:F7:05:9D
            X509v3 Authority Key Identifier:
                keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:6f:76:b5:e4:2c:86:d1:54:c3:71:c5:ee:b9:17:d9:39:
         50:ca:fc:9c:42:33:26:c0:0a:52:fa:23:a9:86:9b:c6:1b:5e:
         b8:91:6e:d7:e4:ba:f5:ce:2d:35:a2:ed:ab:9e:ba:a0:68:23:
         ba:12:83:a9:bc:61:c7:c7:24:78:1c:fe:0e:12:60:2f:59:44:
         15:99:f7:ae:50:f5:0d:23:d8:4a:0b:78:cb:ef:93:68:d6:c5:
         c1:c4:49:6f:b6:24:77:38:e2:ea:c1:e5:47:29:39:82:bd:38:
         de:ae:06:b2:63:09:99:b1:62:5a:0c:e3:8f:2a:f2:85:ca:d5:
         24:a8:79:19:d5:fc:9d:3f:82:51:36:1a:9a:33:0f:d8:54:d1:
         1d:5e:23:22:4a:b0:4e:7f:93:72:f4:dc:8f:13:aa:2e:65:83:
         70:7e:7f:78:3f:9e:d8:d6:e1:8d:1b:ae:71:2a:8d:c7:d1:8f:
         5d:d2:e5:56:98:10:00:c8:e2:5b:44:c9:81:34:bc:be:c4:d3:
         c4:f7:51:f3:08:aa:fb:dd:06:11:dc:28:88:03:60:29:82:21:
         e5:43:04:69:18:c2:51:d1:d4:67:4a:39:e2:bb:84:20:05:1d:
         66:7c:c7:13:40:62:c8:8c:a5:1e:b9:2d:1f:e4:bc:1c:b3:93:
         5f:18:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:50:14 2024 by rpki-client on console-fra.rpki-client.org